Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-ULDcHkp69YCVjW19dBR67ZDG4.cer
File:                     u-ULDcHkp69YCVjW19dBR67ZDG4.cer (raw, json)
Hash identifier:          lkyyNX7yw1QtXxuB8wgWWCm+p9TKeCxFWdRIaCc1YKA=
Subject key identifier:   BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02A00E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 12:42:32 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 18022
                          AS: 139319
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172046 (0x2a00e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 27 12:42:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9130626, serialNumber=BBE50B0DC1E4A7AF580958D6D7D74147AED90C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:92:a7:e4:ee:8e:9f:6d:4a:7c:ae:d1:39:
                    a4:62:21:25:3a:6f:5c:4c:65:bf:39:a8:fd:5b:cc:
                    1c:2a:be:34:8f:ed:f2:4a:63:f8:34:e0:da:e6:ff:
                    d9:83:66:37:e7:c0:ae:47:88:ef:ab:d4:32:b2:5a:
                    6b:6b:aa:4d:cd:17:92:10:0b:6d:b1:cf:d7:1e:34:
                    e2:67:5a:1d:27:10:6a:af:be:9c:2d:93:f2:3d:a6:
                    d9:7c:0e:26:2b:86:0c:cf:8c:cf:a0:45:8a:25:6a:
                    73:43:6f:00:8e:38:f8:5d:e4:74:da:99:fa:67:2f:
                    ba:29:1a:c0:d0:e0:fc:22:c9:c3:ec:71:14:cb:91:
                    fe:ee:e7:a3:f8:58:92:eb:85:98:24:94:b4:0d:dc:
                    fc:80:6c:e2:da:0f:a0:54:bc:7c:50:22:2b:15:b0:
                    84:d8:29:0f:72:66:df:67:60:5b:08:f1:0e:ac:13:
                    05:a2:11:f4:43:46:fc:f1:ea:ef:dd:8f:7a:e2:35:
                    b6:80:e1:5b:30:e8:fb:3a:57:7d:d0:99:27:a3:e1:
                    f8:4f:e9:2a:08:6b:ee:a5:d3:0d:c2:19:14:92:ce:
                    81:eb:12:38:77:d3:6d:7d:a0:55:d7:5d:e0:25:65:
                    83:33:3b:d3:34:a7:58:ed:d4:c0:03:e8:65:f2:01:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E5:0B:0D:C1:E4:A7:AF:58:09:58:D6:D7:D7:41:47:AE:D9:0C:6E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/u-ULDcHkp69YCVjW19dBR67ZDG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18022
                  139319

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:f9:8c:6c:36:c7:94:9f:b6:72:7c:92:4f:a5:a7:f2:42:
         40:62:58:fd:f8:79:32:73:af:c3:1f:86:0c:51:af:e0:bc:01:
         02:75:c1:47:80:aa:5d:52:6b:97:ef:09:db:4f:0c:fd:4b:03:
         a0:00:18:3a:41:fb:93:83:a4:4c:af:8d:06:da:75:40:d7:2a:
         59:0e:eb:71:78:d7:39:e5:d8:79:7a:2e:4b:53:e7:ac:90:a4:
         e2:c1:69:71:e0:de:e4:22:29:00:c9:24:6c:2e:95:c3:b3:5e:
         10:17:c6:fc:34:ca:cc:71:df:b1:a8:b8:7f:0e:af:09:ae:b3:
         05:69:66:7f:2f:83:4b:c0:c6:68:d6:6e:04:9f:bb:c4:8a:1e:
         b4:ec:c7:94:50:dc:6f:cc:4c:77:3e:0c:0f:ec:b1:f4:99:c4:
         3e:80:db:43:80:c5:cb:fb:0e:e7:3f:4d:b2:a0:3c:a6:4b:67:
         8c:04:7b:e1:87:02:95:8d:80:e3:92:54:5d:c6:fc:a2:70:26:
         a9:3c:7a:a1:59:f9:15:8a:90:ea:a4:90:ba:2b:e7:87:5e:e8:
         a9:f3:49:e1:41:34:93:0c:cb:7d:77:ba:45:6c:24:13:90:ee:
         48:8d:71:12:0d:59:2c:2f:09:77:06:89:48:66:17:ef:1b:3c:
         e5:c7:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:19 2026 by rpki-client